Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
File: dC44IKB42kewo3Ti06ZtYmPB4j8.mft (raw, json)
Hash identifier: ll9hlt4Ehj1xKf9TElpITo0oKcY6sqlm/irNSdI9/R0=
Subject key identifier: 8D:8B:D7:D8:4F:7E:EC:86:35:AE:A2:B8:C5:16:B6:37:40:D3:92:2B
Authority key identifier: 74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
Certificate issuer: /CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Certificate serial: 019C074450F3E9D0F3DBAF9C51F7617E806D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
Manifest number: 10C1
Signing time: Thu 29 Jan 2026 01:00:43 +0000
Manifest this update: Thu 29 Jan 2026 01:00:43 +0000
Manifest next update: Fri 30 Jan 2026 01:00:43 +0000
Files and hashes: 1: dC44IKB42kewo3Ti06ZtYmPB4j8.crl (hash: f7MxY3B+60tJstYUN4wSPoW5VCNDrhlN11kwhAQDEkk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:07:44:50:f3:e9:d0:f3:db:af:9c:51:f7:61:7e:80:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Validity
Not Before: Jan 29 01:00:43 2026 GMT
Not After : Jan 30 01:00:43 2026 GMT
Subject: CN=8d8bd7d84f7eec8635aea2b8c516b63740d3922b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:eb:2e:41:ee:18:d1:fe:60:e1:dd:1a:19:
a0:93:f6:f3:d0:51:17:37:75:60:1b:ca:7c:9e:a2:
26:f3:18:6d:5c:5f:f2:1f:bc:a6:ac:de:df:35:a4:
ab:4b:4a:e1:75:99:ab:71:82:66:9a:6e:a1:ed:9d:
65:d7:7e:4e:2e:8c:12:75:74:93:25:a1:0e:45:62:
fd:c4:2c:6e:0c:a5:73:b5:23:df:85:7c:ed:1b:c4:
cd:93:78:b1:f9:b8:7b:61:7f:f4:18:1e:be:38:99:
54:3d:79:45:35:ae:ae:b4:d0:b8:ae:99:43:dd:42:
88:18:fa:bd:b2:5a:3b:ea:c3:91:96:18:c6:0a:b9:
87:94:c9:a9:e0:14:11:27:5f:9d:c7:65:df:02:f0:
b5:51:22:c0:6b:8d:71:cf:88:25:3e:61:e2:e4:45:
e6:39:f4:95:e8:fd:22:eb:0b:84:5a:e9:1b:84:bb:
c0:53:a8:b8:80:34:1f:55:d7:ea:8c:73:26:4c:6d:
b5:d2:a0:69:bc:b2:cd:80:ee:9b:3c:c0:6a:8d:97:
22:4c:55:9a:6b:20:78:0f:05:42:48:61:27:db:6c:
cd:2f:c0:44:8a:84:05:b8:4d:ec:13:f4:e6:55:1a:
4e:22:d6:84:1b:67:e1:7b:d0:43:a3:47:c2:82:b1:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8B:D7:D8:4F:7E:EC:86:35:AE:A2:B8:C5:16:B6:37:40:D3:92:2B
X509v3 Authority Key Identifier:
keyid:74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:23:4c:55:94:1d:5e:07:07:66:28:9b:9e:d8:4a:65:17:a5:
d4:9c:8d:e9:96:df:d2:7d:77:46:8d:82:74:a3:3b:3d:64:cc:
de:c1:43:b5:1c:6d:a8:bb:a0:ac:c7:5c:9c:76:39:d6:a3:4d:
5d:04:90:c8:43:bd:f7:41:68:f1:a4:35:f5:1c:6d:2b:4a:fc:
b2:46:d3:c7:eb:7a:e2:6d:97:94:7a:ac:11:14:9a:ce:65:c9:
d3:50:4b:af:fb:1a:43:b7:1a:06:8a:b4:d6:f4:93:80:f0:25:
3f:80:3b:67:9e:2d:19:ef:29:0e:12:0f:b2:6a:a1:c7:86:c2:
a4:f4:f9:f4:82:68:8e:ef:bb:28:d5:ec:b0:15:33:aa:1a:1c:
80:fc:f8:af:2d:73:7f:05:22:66:e3:49:6b:39:ae:45:d5:2c:
3b:59:59:df:c1:ca:ee:28:fb:06:39:c5:82:eb:c3:ee:d4:b4:
23:d2:c8:93:da:a9:3c:2d:bc:e8:9b:4a:4f:d7:db:03:9f:1c:
f6:10:a7:22:a6:a3:06:ac:e6:52:e1:d2:bd:1c:6b:b6:c5:ba:
97:15:ab:75:17:f8:cc:82:20:46:d3:7a:32:ab:51:1b:d7:4f:
36:86:31:f4:25:23:a6:63:d7:10:0c:f3:b5:b8:7a:31:a9:93:
f5:c5:15:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:51 2026 by rpki-client